hack/db script should use RP client credentials to access KeyVault instead of CLI

[Roland Kunkel]

hack/db.go creates the authorizer for the key vault from the CLI login. It should instead use the same credentials as the RP to not be dependent on the CLI user's groups.